[ 51.808952][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.967464][ T9] device veth1_macvtap left promiscuous mode [ 51.968312][ T9] device veth0_macvtap left promiscuous mode [ 51.969133][ T9] device veth1_vlan left promiscuous mode [ 51.969911][ T9] device veth0_vlan left promiscuous mode [ 52.076299][ T9] team0 (unregistering): Port device team_slave_1 removed [ 52.085896][ T9] team0 (unregistering): Port device team_slave_0 removed [ 52.090328][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.111090][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.214256][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. 1970/01/01 00:01:03 ignoring optional flag "type"="gce" 1970/01/01 00:01:04 parsed 1 programs [ 65.369483][ T4468] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 68.099114][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.100541][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.101931][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.111414][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.112840][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.114446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.442757][ T4506] chnl_net:caif_netlink_parms(): no params data found [ 68.462432][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.463647][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.465292][ T4506] device bridge_slave_0 entered promiscuous mode [ 68.467667][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.468755][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.470303][ T4506] device bridge_slave_1 entered promiscuous mode [ 68.481110][ T4506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.483968][ T4506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.494626][ T4506] team0: Port device team_slave_0 added [ 68.498407][ T4506] team0: Port device team_slave_1 added [ 68.505776][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.506927][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.511459][ T4506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.513968][ T4506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.515109][ T4506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.519853][ T4506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.578621][ T4506] device hsr_slave_0 entered promiscuous mode [ 68.627527][ T4506] device hsr_slave_1 entered promiscuous mode [ 69.268140][ T4506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.299644][ T4506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.358711][ T4506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.389673][ T4506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.486270][ T4506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.493936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.495469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.499707][ T4506] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.502470][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.504033][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.505569][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.506760][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.512794][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.516612][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.518987][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.521051][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.522155][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.523598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.538370][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.540249][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.542586][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.544273][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.545993][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.549411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.551027][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.555233][ T4506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.557183][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.562011][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.563686][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.565220][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.608768][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.609624][ T3336] cfg80211: failed to load regulatory.db [ 69.609983][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.668760][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.670108][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.673532][ T4506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.691255][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.692943][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.702546][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.704083][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.705715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.707194][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.714829][ T4506] device veth0_vlan entered promiscuous mode [ 69.719794][ T4506] device veth1_vlan entered promiscuous mode [ 69.727232][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.728971][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.730374][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.731886][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.735243][ T4506] device veth0_macvtap entered promiscuous mode [ 69.739391][ T4506] device veth1_macvtap entered promiscuous mode [ 69.746216][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.751895][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.753449][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.754951][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.756563][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.770106][ T4506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.772472][ T4506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.773832][ T4506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.775237][ T4506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.776623][ T4506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.795275][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.797051][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 1970/01/01 00:01:10 executed programs: 0 [ 70.527200][ T4692] chnl_net:caif_netlink_parms(): no params data found [ 70.554711][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.555928][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.557888][ T4692] device bridge_slave_0 entered promiscuous mode [ 70.560049][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.561070][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.562591][ T4692] device bridge_slave_1 entered promiscuous mode [ 70.576048][ T4692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.579484][ T4692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.588388][ T4692] team0: Port device team_slave_0 added [ 70.590689][ T4692] team0: Port device team_slave_1 added [ 70.600438][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.601666][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.605981][ T4692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.608602][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.609799][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.614316][ T4692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.668691][ T4692] device hsr_slave_0 entered promiscuous mode [ 70.707725][ T4692] device hsr_slave_1 entered promiscuous mode [ 70.737905][ T4692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.739142][ T4692] Cannot create hsr debugfs directory [ 70.782798][ T4692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.577296][ T4622] Bluetooth: hci1: command 0x0409 tx timeout [ 73.301228][ T4692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.647654][ T4072] Bluetooth: hci1: command 0x041b tx timeout [ 75.730541][ T4692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.786658][ T4692] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.925633][ T4692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.968705][ T4692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.039286][ T4692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.088799][ T4692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.151690][ T4692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.155726][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.158685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.162195][ T4692] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.164849][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.166547][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.168472][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.169592][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.171172][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.174799][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.176482][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.178117][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.179635][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.182424][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.185415][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.189122][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.190944][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.192560][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.195237][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.196994][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.201477][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.203027][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.205718][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.207925][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.223668][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.274025][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.275463][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.279996][ T4692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.287163][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.289344][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.296036][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.298052][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.300439][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.301963][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.303943][ T4692] device veth0_vlan entered promiscuous mode [ 76.309371][ T4692] device veth1_vlan entered promiscuous mode [ 76.321304][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.322980][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.324520][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.326125][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.329742][ T4692] device veth0_macvtap entered promiscuous mode [ 76.332658][ T4692] device veth1_macvtap entered promiscuous mode [ 76.346987][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.349324][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.351551][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.352949][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.354547][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.356085][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.358108][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.361596][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.363342][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.365363][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.366576][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.368552][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.371403][ T4692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.372788][ T4692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.374224][ T4692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.375639][ T4692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.393590][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.394974][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.396344][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.407142][ T971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.408777][ T971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.410166][ T971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:16 executed programs: 2 [ 76.531699][ T4905] loop0: detected capacity change from 0 to 32768 [ 76.727354][ T4145] Bluetooth: hci1: command 0x040f tx timeout [ 76.757088][ T4907] loop0: detected capacity change from 0 to 32768 [ 76.920837][ T4909] loop0: detected capacity change from 0 to 32768 [ 77.048621][ T4911] loop0: detected capacity change from 0 to 32768 [ 77.180440][ T4913] loop0: detected capacity change from 0 to 32768 [ 77.335026][ T4915] loop0: detected capacity change from 0 to 32768 [ 77.489711][ T4917] loop0: detected capacity change from 0 to 32768 [ 77.654748][ T4919] loop0: detected capacity change from 0 to 32768 [ 77.839692][ T9] device hsr_slave_0 left promiscuous mode [ 77.877372][ T9] device hsr_slave_1 left promiscuous mode [ 77.893404][ T4921] loop0: detected capacity change from 0 to 32768 [ 77.937351][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.938561][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.940182][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.941341][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.942781][ T9] device bridge_slave_1 left promiscuous mode [ 77.943956][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.998490][ T9] device bridge_slave_0 left promiscuous mode [ 77.999643][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.127459][ T9] device veth1_macvtap left promiscuous mode [ 78.128511][ T9] device veth0_macvtap left promiscuous mode [ 78.129574][ T9] device veth1_vlan left promiscuous mode [ 78.130634][ T9] device veth0_vlan left promiscuous mode [ 78.254068][ T9] team0 (unregistering): Port device team_slave_1 removed [ 78.258546][ T9] team0 (unregistering): Port device team_slave_0 removed [ 78.263756][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.293640][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.374971][ T9] bond0 (unregistering): Released all slaves [ 78.415200][ T4923] loop0: detected capacity change from 0 to 32768 [ 78.772050][ T148] ================================================================== [ 78.773473][ T148] BUG: KASAN: use-after-free in copy_page_from_iter_atomic+0x974/0x123c [ 78.774701][ T148] Read of size 4096 at addr ffff0000cb700000 by task kworker/u4:2/148 [ 78.775981][ T148] [ 78.776318][ T148] CPU: 1 PID: 148 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 78.777586][ T148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.779383][ T148] Workqueue: loop0 loop_workfn [ 78.780210][ T148] Call trace: [ 78.780743][ T148] dump_backtrace+0x0/0x458 [ 78.781485][ T148] show_stack+0x2c/0x3c [ 78.782194][ T148] __dump_stack+0x30/0x40 [ 78.782923][ T148] dump_stack_lvl+0xf4/0x15c [ 78.783674][ T148] print_address_description+0x78/0x30c [ 78.784617][ T148] kasan_report+0xec/0x158 [ 78.785355][ T148] kasan_check_range+0x268/0x2a0 [ 78.786139][ T148] memcpy+0x90/0xe8 [ 78.786768][ T148] copy_page_from_iter_atomic+0x974/0x123c [ 78.787778][ T148] generic_perform_write+0x284/0x488 [ 78.788657][ T148] __generic_file_write_iter+0x23c/0x454 [ 78.789577][ T148] generic_file_write_iter+0xb0/0x1b4 [ 78.790447][ T148] do_iter_readv_writev+0x3a8/0x50c [ 78.791312][ T148] do_iter_write+0x1c4/0x670 [ 78.792014][ T148] vfs_iter_write+0x88/0xac [ 78.792760][ T148] lo_write_bvec+0x364/0xa30 [ 78.793544][ T148] loop_process_work+0x1b98/0x22a0 [ 78.794339][ T148] loop_workfn+0x50/0x64 [ 78.795084][ T148] process_one_work+0x79c/0x1138 [ 78.795893][ T148] worker_thread+0x8f4/0x1034 [ 78.796708][ T148] kthread+0x374/0x454 [ 78.797354][ T148] ret_from_fork+0x10/0x20 [ 78.798067][ T148] [ 78.798422][ T148] The buggy address belongs to the page: [ 78.799413][ T148] page:00000000521e089d refcount:1 mapcount:-512 mapping:0000000000000000 index:0x0 pfn:0x10b700 [ 78.801185][ T148] memcg:ffff0000c924eb02 [ 78.801889][ T148] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 78.803202][ T148] raw: 05ffc00000000000 0000000000000000 0000000000000000 0000000000000000 [ 78.804658][ T148] raw: 0000000000000000 ffff0000d144c4e0 00000001fffffdff ffff0000c924eb02 [ 78.806117][ T148] page dumped because: kasan: bad access detected [ 78.807170][ T148] [ 78.807535][ T148] Memory state around the buggy address: [ 78.808510][ T148] ffff0000cb6fff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.809916][ T148] ffff0000cb6fff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.811332][ T148] >ffff0000cb700000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.812798][ T148] ^ [ 78.813572][ T148] ffff0000cb700080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.814965][ T148] ffff0000cb700100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.816384][ T148] ================================================================== [ 78.817841][ T148] Disabling lock debugging due to kernel taint [ 78.820991][ T4150] Bluetooth: hci1: command 0x0419 tx timeout [ 78.823987][ C1] Unable to handle kernel paging request at virtual address dfff800000000042 [ 78.825198][ C1] Mem abort info: [ 78.825790][ C1] ESR = 0x0000000096000006 [ 78.826537][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 78.827595][ C1] SET = 0, FnV = 0 [ 78.828249][ C1] EA = 0, S1PTW = 0 [ 78.828870][ C1] FSC = 0x06: level 2 translation fault [ 78.829778][ C1] Data abort info: [ 78.830385][ C1] ISV = 0, ISS = 0x00000006 [ 78.831189][ C1] CM = 0, WnR = 0 [ 78.831806][ C1] [dfff800000000042] address between user and kernel address ranges [ 78.833149][ C1] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 78.834287][ C1] Modules linked in: [ 78.834896][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 78.836254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.837867][ C1] pstate: 024000c5 (nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.839122][ C1] pc : lbmIODone+0x2c0/0x12f8 [ 78.839920][ C1] lr : lbmIODone+0x2b4/0x12f8 [ 78.840734][ C1] sp : ffff80001b4d7a00 [ 78.841481][ C1] x29: ffff80001b4d7a90 x28: 1fffe000190e26c1 x27: 0000000000001274 [ 78.842866][ C1] x26: 0000000000000210 x25: dfff800000000000 x24: 0000000000000000 [ 78.844212][ C1] x23: ffff0000c8713608 x22: ffff0000c8713610 x21: 0000000000000000 [ 78.845652][ C1] x20: 0000000000000004 x19: ffff0000c8713600 x18: 0000000000000001 [ 78.846994][ C1] x17: 0000000000000000 x16: ffff8000112695d4 x15: 0000000000000000 [ 78.848347][ C1] x14: 00000000ffff8000 x13: 00000000add33a76 x12: 0000000000ff0100 [ 78.849755][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : ffff80001af68250 [ 78.851080][ C1] x8 : 0000000000000042 x7 : 0000000000000000 x6 : 000000000000003f [ 78.852463][ C1] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000097e66fc [ 78.853730][ C1] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 [ 78.854989][ C1] Call trace: [ 78.855560][ C1] lbmIODone+0x2c0/0x12f8 [ 78.856292][ C1] bio_endio+0x71c/0x75c [ 78.857034][ C1] blk_update_request+0x7a4/0x10f8 [ 78.857873][ C1] blk_mq_end_request+0x54/0x88 [ 78.858675][ C1] lo_complete_rq+0x1ec/0x250 [ 78.859505][ C1] blk_done_softirq+0x11c/0x168 [ 78.860278][ C1] handle_softirqs+0x344/0xbe4 [ 78.861089][ C1] run_ksoftirqd+0x7c/0x29c [ 78.861872][ C1] smpboot_thread_fn+0x4b0/0x920 [ 78.862759][ C1] kthread+0x374/0x454 [ 78.863400][ C1] ret_from_fork+0x10/0x20 [ 78.864152][ C1] Code: 97c17b15 9100431a f94002d8 d343ff48 (38796908) [ 78.865341][ C1] ---[ end trace 49f652ce485d438a ]--- [ 79.110591][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 79.111646][ C1] SMP: stopping secondary CPUs [ 79.112519][ C1] Kernel Offset: disabled [ 79.113265][ C1] CPU features: 0x8,000003c1,7d33ffd9 [ 79.114214][ C1] Memory Limit: none [ 79.353603][ C1] Rebooting in 86400 seconds..